
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: 0RHmKkJPHt7Mjy4WBUWPwhQXaQhG6zWci6VLybAyxnw=
Subject key identifier: B2:E7:AE:E5:00:13:E2:5F:61:95:36:A6:7E:C8:C2:92:43:61:43:00
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019E1D9020AD62D3CDFCF91DC33FA285E823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:00:45 +0000
Manifest this update: Tue 12 May 2026 19:00:45 +0000
Manifest next update: Wed 13 May 2026 19:00:45 +0000
Files and hashes: 1: bVyEsAAvKQpoixKzifb7SAIwq1U.asa (hash: Hhp/2raaHt+BHUMvrNvJ13U1em+DJrRPvGuzd1hW10U=)
2: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
3: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: 9kxZDKkpgZ6LTXqlZBLxkNvo8XAz2VXmxQ3DFAeJaIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:20:ad:62:d3:cd:fc:f9:1d:c3:3f:a2:85:e8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: May 12 19:00:45 2026 GMT
Not After : May 13 19:00:45 2026 GMT
Subject: CN=b2e7aee50013e25f619536a67ec8c29243614300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:5b:78:1f:59:5d:9b:af:8d:63:ef:29:1e:
ff:17:c3:17:25:1a:55:a0:42:65:1b:08:6a:c4:5a:
e5:d5:7b:3c:d5:5d:d5:8f:8b:88:97:24:5c:fa:41:
f6:bc:49:1b:bc:2b:b1:e6:6a:bb:c8:8f:20:52:47:
82:af:20:10:6d:f3:d8:b5:93:6f:96:0d:cf:d3:33:
0c:2a:d6:70:af:56:5c:1d:02:f0:c3:2c:98:40:f6:
13:74:8b:ec:d9:05:71:0c:3d:f6:38:46:ce:92:7d:
0e:38:fb:d5:f1:9b:58:cc:10:c8:45:4f:34:68:5b:
c5:fd:4e:21:d5:7e:60:40:fa:a0:b0:60:25:82:dd:
d1:67:aa:ba:ae:cb:fc:51:59:57:57:1b:38:31:07:
71:41:18:bb:76:38:9b:7e:11:93:82:1f:56:26:4d:
fe:49:ba:86:63:06:b2:02:14:bd:19:f2:c2:d4:8b:
ca:6c:f6:af:39:c3:31:ae:32:75:1e:8e:3a:22:ca:
c1:33:9d:28:9f:21:58:cd:45:30:f6:56:b5:0d:b5:
52:08:3e:c8:d4:6a:ed:10:b4:59:0c:fa:1a:0b:5a:
cb:41:7d:cc:c0:e0:82:a0:61:76:96:f1:bd:5e:e4:
33:84:c2:3f:45:2e:40:43:bb:55:87:6a:1a:be:ef:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:AE:E5:00:13:E2:5F:61:95:36:A6:7E:C8:C2:92:43:61:43:00
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c5:be:a1:3e:19:9a:3c:26:63:07:01:77:b7:21:f6:0d:0b:
5c:f6:20:81:c4:89:ca:9c:ec:90:f4:41:5a:17:2a:21:82:71:
1f:26:62:e7:22:50:ba:1b:d3:14:55:ea:6c:ed:81:51:b2:2c:
69:85:f3:57:ab:09:6f:91:4b:a2:33:41:29:91:a7:22:17:c9:
51:40:44:91:54:c6:74:c4:e2:61:96:25:50:77:4d:9e:5a:b8:
db:40:14:cf:e7:4e:f9:99:c7:ab:cf:81:10:d8:9a:e8:ea:54:
6d:62:1f:78:db:11:5a:f4:df:bb:8f:65:b2:7b:eb:3c:2c:44:
71:9b:d9:33:31:b8:d3:87:1e:71:bc:48:61:9f:97:c3:6f:8f:
c5:06:e0:14:75:d0:49:95:f9:15:19:25:6d:1d:c0:96:d8:3a:
2f:bb:7e:15:7d:ce:9f:8c:c9:6a:bb:2b:e0:89:65:7f:a1:6c:
86:67:2f:36:ac:eb:f8:b5:49:56:5c:33:5f:4f:f7:f8:47:b7:
73:9b:1f:0c:69:44:a9:5f:b4:3d:d7:b9:a7:c4:91:b5:e4:06:
47:15:60:b2:5a:a7:5e:98:c1:dd:20:43:1a:a3:2a:11:6f:81:
ea:0a:69:9d:5d:83:50:39:d1:3f:2c:78:3c:41:dc:00:fa:00:
87:02:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:19 2026 by rpki-client